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Digital watermarking is considered one of the technological means used to guar- 
antee the security and authenticity of data transmitted over communication sys- 
tems. A new method of image watermarking using the bidimensional empirical 
mode decomposition (BEMD) will be presented in this article, where the new 
idea is to use the BEMD of both the cover image and the watermark image. The 
embedding process consists of adding to each intrinsic modal function (IMF) 
of the cover image the corresponding IMF of the watermark image. The wa- 
termarked image contains three different watermarks and appropriate frequen- 
cies, which makes it more robust. We use this method for two reasons: first, 


decomposition . to conserve the constituent characteristics of each IMF and second, to ensure 
Patchwork algorithm the invisibility of the watermark. The results obtained showed a good response 
Robustness against different kinds of attacks. This technique has been compared with other 
methods of image watermarking based on decomposition BEMD, which showed 
good results. 
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1. INTRODUCTION 

The advancement of media documents and the practice of sharing them over the internet further in- 
crease the accessibility and the illegal distribution of multimedia data. In this context, digital watermarking 
is a robust technique protecting this data [T], [2]. We study two aspects of the digital watermarking process: 
embedding and detection. The watermark is said to be robust if it is detectable when the quality of the image is 
not deficient [3]. The watermark scheme is private (not blind) if it uses the cover image in the detection phase 
or public (blind) in the other case. A portrayal of different watermarking techniques can be explored in [4]-[8]. 
An image watermarking method is effective if it satisfies the conditions of perceptibility, robustness and capac- 
ity. The influence of the capacity on the robustness and the perceptibility should be taken into consideration [9]. 
Among the issues of image watermarking is how the technique shows more robustness against various attacks, 
without affecting the two factors perceptibility and capacity [9]. The image watermarking using bidimensional 
empirical mode decomposition (BEMD) was introduced in [10]. In general, these methods use the first intrinsic 
modal function (IMF) that contain the high frequencies to insert the watermark [11]-[14]. Additionally, these 
methods are more robust than other methods against differend kinds of attacks, notably noise attacks and JPEG 
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compression, but they have some difficulties in terms of robustness against geometric attacks [15]. 

In this context, we suggest a new method of image watermarking based on BEMD. This method 
has shown good results for robustness against a variety of attacks. It has also proven its effectiveness in 
comparison to two other BEMD-based image watermarking techniques. In this article, we will explain an image 
watermarking method that is based on decomposing the cover image into three frequency ranges or IMFs (high, 
medium, and low frequency) using the BEMD and inserting a suitable frequency watermark at each frequency 
range. Moreover, the advantages of this method allow us to increase the capacity of the watermark without a 
noticeable influence on the robustness and the perceptibility of the watermarked image, which we will see in 
the experimental results. 


2. EMPIRICAL MODE DECOMPOSITION OF 2D 

Huang, in the late nineties, introduced a new method for signal processing that was more adaptive to 
non-stationary and non-linear signals called empirical mode decomposition (EMD) [16]. Research by Nunes 
et al. in 2003 it was first applied in the field of image processing. This decomposition makes possible the 
extraction of structures at different scales and frequencies, including amplitude and frequency modulations. The 
principle of the BEMD is to develop each signal s into a set of functions by the signal itself called bidimensional 
intrinsic mode functions (BIMFs) or 2D IMFs and a residue. This procedure is known as a sifting process. The 
reconstitution of the original signal is done without the loss or distortion of information. The properties of an 
IMF are the following [17]: i) each IMF has the same number of zero crossings and extrema and ii) each IMF 
is symmetric with respect to the local mean. The BEMD method consists of the following steps [18]: 


a. Initialize ro = m (the residual) and k = 1 (the index number of IMF). 
b. Extract the kt” IMF (sifting process): 

i. Initialize ho = rz_ andj = 1. 

ii. j=1 extract the local minima and maxima of h;_1. 


iii. Compute the upper envelope and lower envelope functions xj—1 and yj—1 by interpolating, respec- 
tively, the local minima and local maxima of h;_1. 


iv. Compute the mean envelope: 
my—1 = (@j-1 + yj-1)/2 (1) 


v. Update hj = hj-1 — mj_, andj = j +1. 


vi. Calculate the stopping criterion: 


T i _ p.)2 
SD(j) = 1 See (2) 


where € is a (weak) term eliminating any divisions by zero. 


g. Decision: repeat steps (ii) through (vi) until SD; < SDmaz and then put dk = hj (kt? IMB). 
c. Update the residue rg = rk—1 — dk. 


d. Repeat steps a—c with k = k + 1 until the number of extrema in rx is less than 2. 


3. METHOD 
3.1. Watermark embedding 

We use Bender’s algorithm “patchwork” [19]. Figure 1 present an additive watermark scheme was 
applied to each of the first three IMFs of the cover image J, where the watermark of the kt” IMF is a kt” IMF 
of the watermark image after it is divided by 255 to make the values of each IMF in the interval [—1, 1] (each 
pixel in our cover image has a value between 0 and 255, but during the BEMD decomposition process these 
values shift to values between -255 and 255. To get it between -1 and 1 each value is divided by 255). This is 
done for two reasons: first, to conserve the constituent characteristics of each IMF and second, to ensure mark 
invisibility in the watermarked image. The embedding scheme of the watermark is in the following form: 


Bulletin of Electr Eng & Inf, Vol. 12, No. 5, October 2023: 2955-2963 


Bulletin of Electr Eng & Inf ISSN: 2302-9285 o 2957 


- Step 1: extract the first three IMFs and residue by BEMD of the cover image T: 


FS 5 IM Fk + residue with n=3 (3) 

k=1 
- Step 2: extract the first three IMFs and residue by BEMD of the watermark image W, and divide each 

IMF by 255: 

W=YŅ_IMF,+residue with n=3 (4) 

k=1 

IMF, 
W; = E ith k=1,2,3 5 

k 255 Wt 94) ( ) 


Finally, each Wy keeps the same characteristics but contains smaller amplitudes than those of I M F. 


- Step 3: embed the corresponding watermark in each IMF of the cover image: 


IM Fw, = IM Fk + Wk with k=1, 2,3 (6) 

- Step 4: the watermarked image is constructed by adding all the watermarked IMFs and the residue of the 
BEMD of the cover image: 

Iw = 5 IMFw,+residue with n=3 (7) 


k=1 


[_ cover image | [watermark image atermarked image| 
ee canner | 
1 T 
IMF, - =H M Fw, 
hanaan + Eea 
+ : + 
IMF TM Fw, 
Eksen F pM Five | 
+ , — 
IMF; * 255 
IMF: 3 + = MF W3 
residue. 
residue | 
residue J >residue 
ae eS 


J J l 


Figure 1. Diagram of watermark embedding process 


3.2. Watermark extraction 
We use the dual operation for watermark detection (Figure 2), explained in the following scheme: 


- Step 1: extract the first three IMFs and residue by BEMD of the watermarked image Iw: 


L= 5 IM Fw, + residue with n=3 (8) 
k=1 
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- Step 2: extract the first three IMFs and residue by BEMD of the watermark image W, and divide each 


IMF by 255: 
W = 5 IMF, + residue with n=3 (9) 
k=1 
IMF, ! 
= th =1,2 1 
Wk 255 wi k ,2,3 (10) 


- Step 3: extract three watermarks from the first three IMFs: 


IMF; =IMFy,—Wr with k=1,2,3 (11) 
I*= 5 IMF +residue with n=3 (12) 
k=1 


I* is the recovered cover image from the watermarked image. 


- Step 4: we can check for the presence of the watermark image by using the threshold and the correlation 
between each JM Fý and IM Fj, and even between J and I*. 


(watermarked imagd [watermark image] recovered cover 
image 
7 =I 
IMFw, T L_st py FY 
T = + 
IM Fw, LIM F3 
ee Æ ME | 
+ = T 
IMF: 255 
IM Fw, a t—e IM F} 
aid 
residue. 
jresidue | 
residue l >Tresidue 
eee 


J ce re a a 


Figure 2. Diagram of watermark extraction process 


4. RESULTS AND ANALYSIS 

In Figure 3, we use a grayscale image (a cameraman (Figure 3(a)) as a simulation image for our 
watermarking method and a Moroccan Zellige image (Figure 3(b)) as a watermark. Both images are of equal 
size 255x255. We have chosen to use the BEMD with compactly supported radial basis functions (BEMD- 
CSRBPF) in this algorithm instead of the classic BEMD [1]]. 


4.1. Watermark embedding and extraction without attacks 

Figure 3 presents a test of the invisibility characteristic that shows that it is well respected for our 
method, since the watermarked image (Figure 3(c)) has a good quality. Figure 4 shows the result of the 
extraction of the watermark image from the watermarked image (Figure 4(a)) without any attacks. Thus, a 
measurement of the correlation between the cover image and the recovered cover image from the watermarked 
image was used to check for the presence of the watermark image. Table 1 gives the correlation between the 
recovered cover image (Figure 4(b)) and the cover image (Figure 3(a)) and even the correlations between their 
IMFs. The results shown in Table 1 confirm that the watermark is easily detectable if there is no attack. 
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(b) (b) 
Figure 3. Watermark embedding: (a) cover image, (b) Figure 4. Watermark detection: (a) watermarked 
watermark image, and (c) watermarked image image and (b) recovered cover image 


Table 1. Correlation 
Images IMFIs IMF2s IMF3s 
1 0.9536 0.8822 0.8600 


4.2. Robustness of the method in the presence of attacks 

Once the watermarked images are broadcast on the internet. They might be the victims of attacks 
[21-23], either intentional or unintentional. Next, we present some examples of attacks/detection in order to 
test this method in terms of robustness. 


4.2.1. Detection in the presence of white noise attacks 

To test our method against Gaussian white additive noise, we will apply white noise of zero average 
and different variances to our watermarked image, we use the Wiener filter mask (5x5) to denoise our image 
(the watermarked image with white noise), which is assumed to be among the most effective lters against white 
noise attacks. Figure 5 shows the watermarked image under white noise attack with a variance of 0.1 (Figure 
5(a)) and its denoising (Figure 5(b)). In Figure 6, the watermarked image under white noise attack with a 
0.05 variance is presented in Figure 6(a) and its denoising is in Figure 6(b). Figure 7 shows the watermarked 
image attacked with white noise with a variance of 0.01 (Figure 7(a)) and its denoising (Figure 7(b)). Table 2 
presents the correlations results for white noise with different variance values, which indicates that this method 
is resistant to this type of attack. 


(a) (b) (a) (b) 


Figure 5. White noise var. 0.1: (a) watermarked Figure 6. White noise var. 0.05: (a) watermarked 
image under white noise attack and (b) watermarked image under white noise attack and (b) watermarked 
image after reducing the noise image after reducing the noise 


Figure 7. White noise var. 0.01: (a) watermarked image under white noise attack and (b) watermarked image 
after reducing the noise 
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Table 2. Correlation between cover image and each image (Figures 5(b), 6(b) and 7(b)) after extraction of the 


watermark 
White noise variance 0.01 0.05 0.1 
Correlation 0.9277 0.9276 0.9275 


4.2.2. Detection in the presence of different kinds of attacks 

In Table 3, we have tested our method in the presence of known attacks (rotation, median filter, 
Gaussian low-pass filter, (3x3) average filter, salt and pepper noise (0.001), JPEG compression with quality 
factor 50 (QF=50), JPEG2000 compression with compression ratio 12 (CR=12), motion blur (Theta=4 Len=7), 
sharpening (0.8), histogram equalization, and speckle noise (0.001)), we used different angles of rotation and 
different window size for the median filter. This table contains the results of the correlation between the 
cover image and the recovered cover image from the watermarked and attacked image. The correlation values 
obtained from all attacks tested are larger than 0.95, except the correlation of histogram equalization (0.93895). 
Moreover, the values corresponding to median filter remain stable with the change in window size, and likewise 
with small degree rotations. Therefore, from these results, we can see that our method is resistant against these 
attacks. In relation to the results achieved in the Table 3, we can observe in Figure 8, the quality of the recovered 
cover images under different attacks is not deficient. Which shows that the extraction process is generally done 
without problems. Figures 8(a)-(d), respectively, show the recovered cover image under rotation attacks with 
different degrees —0.5°, —0.25°, 0.25°, and 0.5°. The recovered cover images under median attacks are shown 
in Figure 8, median filter (3x3) (Figure 8(e)), median filter (5x5) (Figure 8(f)) and median filter (7x7) (Figure 
8(g)). Figure 8 also shows the recovered cover images under the other attacks we mentioned earlier, Gaussian 
low-pass filter (Figure 8(h)), JPEG compression with quality factor 50 (Figure 8(i)), JPEG2000 compression 
with compression ratio 12 (Figure 8(j)), motion blur with Theta=4 and Len=7 (Figure 8(k)), sharpening 0.8 
(Figure 8(1)), salt and pepper noise 0.001 (Figure 8(m)), histogram equalization (Figure 8(n)), speckle noise 
(0.001) (Figure 8(0)), and average filter (3x3) (Figure 8(p)). 


Table 3. Correlation between the cover image and the recovered cover image 


Attack Correlation 
Angle of rotation (°) —0.5 0.9998 
—0.25 0.9997 
0.25 0.9997 
0.5 0.9998 
Median filter 3*3 0.9840 
5*5 0.9646 
T*T 0.9505 
Gaussian low-pass filter 3*3 0.9976 
JPEG compression QF = 50 0.9943 
JPEG2000 compression CR=12 0.9955 
Motion blur Theta = 4, Len = 7 0.9566 
Sharpening 0.8 0.9917 
Salt and pepper noise 0.001 0.9971 
Histogram equalization 0.9389 
Speckle noise 0.001 0.9976 
Average filter 3*3 0.9790 


4.2.3. Comparison with other watermarking algorithms using BEMD decomposition 

In this section, our algorithm is compared with two approaches of image watermarking using BEMD, 
the first method based on the lifting wavelet transform (LWT) and the BEMD [24], the second method based 
on self-fractional fourier function (SFFF) and BEMD with cyclic error correction coding [25]. Table 4 shows 
the robustness of these methods against some attacks using the cover image of size 512x512 and the water- 
mark image of size 256x256, knowing that the normalized correlation (NC) value is calculated between the 
watermark image and the recovered watermark image. The NCs values of (2x2) median filter, (3x3) Gaussian 
filter, and JPEG compression (10, 20, 30, 40, and 50) concerning our method are higher than those of Bal. 
Comparing with [25], we found that the NCs values of all previous attacks plus 3x3 median filter and (2x2) 
Gaussian filter are slightly improved. The robustness comparison showed in general that our algorithm has 
better NCs values compared to the others, which means that it is better robust against these attacks. According 
to this comparison with the two methods, we have seen how our method improved the robustness results of the 
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tested attacks, although the method has already given significant results. This improvement comes from 
the adaptive approach used in the watermark embedding phase. 


Figure 8. Recovered cover images (cameraman) from the watermarked and attacked images cameraman: (a) 
angle of rotation —0.5°, (b) angle of rotation —0.25°, (c) angle of rotation 0.25°, (d) angle of rotation 0.5°, (e) 
median filter 3x3, (f) median filter 5x5, (g) median filter 7x7, (h) Gaussian low-pass filter, (i) JPEG 
compression QF=50, (j) JPEG2000 compression CR=12, (k) motion blur Theta=4; Len=7, (1) sharpening 0.8, 
(m) salt and pepper noise 0.001, (n) histogram equalization, (0) speckle noise 0.001, and (p) average 
filter 3x3 


Table 4. The NC results comparison with that in and in [25], NaN design that the corresponding values 
are not available 


Attack Our method 
Median filter 2*2 0.9950 NaN 0.99928 
3*3 0.9940 0.8760 0.99925 
Gaussian filter 2*2 0.9950 NaN 0.99798 


3*3 0.9950 0.9590 0.99947 

JPEG compression QF =10 0.9940 0.8360 0.99832 
QF =20 0.9950 0.8456 0.99907 

QF =30 0.9950 0.8757 0.99931 

QF =40 0.9950 0.8816 0.99943 

QF =50 0.9950 0.8904 0.99951 

Speckle noise 0.1 0.9930 NaN 0.99950 


5. CONCLUSION 

A new method of image watermarking using BEMD is presented in this manuscript. The main idea is 
embedding the appropriate frequency watermark in each of the first three IMFs of the cover image (the water- 
marked image contains three different watermarks and suitable frequencies), which provides more robustness 
to the watermarked image. In the presence of different attacks, the robustness test results show a good response. 
Therefore, the comparison with other image watermarking methods using BEMD gave a better performance in 
terms of robustness for most of the attacks tested. 
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